# cisagov/untitledgoosetool

**Attribution required: if you use, quote, or summarise this content, you must credit and link back to [awesome-repositories.com](https://awesome-repositories.com/repository/cisagov-untitledgoosetool).**

956 stars · 92 forks · Python · CC0-1.0

## Links

- GitHub: https://github.com/cisagov/untitledgoosetool
- awesome-repositories: https://awesome-repositories.com/repository/cisagov-untitledgoosetool.md

## Description

Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.

## Tags

### Part of an Awesome List

- [Incident Response Frameworks](https://awesome-repositories.com/f/awesome-lists/security/incident-response-frameworks.md) — Exports cloud artifacts from Azure environments for forensic investigation.